Last updated: 2 July 2026
CertForge ("we", "us", "our") provides a compliance and certificate management platform for contractors and facilities managers. This Privacy Policy explains how we collect, use, and protect your information.
CertForge is developed and operated by Bright Click Studio. For any privacy queries, contact us via the details on our Contact page.
Company name, registration number, VAT number, logo, branding colours, address, and billing details.
Name, email address, role, and authentication credentials for each individual user.
Names, contact details, addresses, and industry information for your customers, entered by you.
Site addresses, asset registers, and associated metadata linked to inspections and jobs.
Checklist responses, findings, recommendations, and compliance observations recorded during site visits.
Work completed reports, site visit reports, maintenance reports, and any custom report content you create.
Certificate data including service dates, due dates, checklist results, and signatures.
Line items, pricing, payment terms, and payment status for commercial documents you issue.
Photos and documents you upload as evidence for reports, certificates, and jobs.
Where Premium AI features are used, notes you provide are sent to our AI provider to help draft report content. See our AI Usage & Disclaimer page for details.
Copies and delivery logs of emails sent through the platform (e.g. invoices, quotes, certificates) for audit purposes.
Basic device and browser information for security and app functionality (e.g. mobile app version).
We use strictly necessary cookies for authentication and session management. See our Cookie Policy for details.
Where enabled, we collect anonymised usage analytics to improve the platform.
All data, including photos and documents, is stored securely using encrypted cloud infrastructure with tenant-level data isolation.
We use industry-standard security practices including encryption in transit, access controls, and role-based permissions to protect your data.
We retain your data for as long as your account is active, or as required to meet legal and regulatory obligations, after which it is securely deleted or anonymised.
If you are in the UK or EU, you have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing.
You may request a copy of your data or ask us to delete your account and associated data at any time via Contact & Support.
To request deletion of your account or data, use the Delete Account option in your account settings or contact our support team. We will process deletion requests in line with applicable law and any regulatory retention requirements.
For any privacy-related questions, please visit our Contact & Support page.
We may update this Privacy Policy from time to time. Material changes will be communicated via the app or by email.